This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File:                     gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier:          47hVXyd+XpA7uPlb6da8X70bVzHHl94mpnGzWCm7gVs=
Subject key identifier:   EF:D1:EA:B6:95:13:6C:B8:EA:74:F0:12:E3:0C:66:91:9A:A7:AB:2E
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer:       /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial:       019AF5E62561A86D8F3B7791771CF1996DA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number:          176B
Signing time:             Sat 06 Dec 2025 23:01:31 +0000
Manifest this update:     Sat 06 Dec 2025 23:01:31 +0000
Manifest next update:     Sun 07 Dec 2025 23:01:31 +0000
Files and hashes:         1: DurIZqoPKpw9LYGIPBrHPFq3LHw.roa (hash: zhg8WLRUrYe0q7NH9Wz8ueiA39mg7KprcnCZzHNNbsw=)
                          2: PnB8IMDITEDpen2OPTOxZTtueZw.roa (hash: qeR+1XSa8d/i/SIsn+15UPdwoIkYRW0OqLmRrfqzRas=)
                          3: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: E18Ir89JjxQXoirkbilqaUznvPwAk2gskeq6hI3TXEY=)
                          4: n307rGiwYsk1vOiGMRbS2fV0BSk.roa (hash: tlfldYKCmk1Ckto3uCUJi3f86MeyWZSU+wFP+RVK1Ew=)
                          5: vTNM4m6CbUwbrvUjHBwBVw0_vYs.roa (hash: 7BbpPre0ZtLQJ0mFYOMZGVaoQeJskvISu8hLB2sHUnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:e6:25:61:a8:6d:8f:3b:77:91:77:1c:f1:99:6d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
        Validity
            Not Before: Dec  6 23:01:31 2025 GMT
            Not After : Dec  7 23:01:31 2025 GMT
        Subject: CN=efd1eab695136cb8ea74f012e30c66919aa7ab2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:15:b7:20:63:30:bd:f2:ad:6c:2b:3a:ca:c7:
                    29:42:f0:4f:b4:0a:e2:1e:92:e4:9f:44:f8:05:ef:
                    5d:5b:bc:87:3e:85:7c:89:38:f2:49:0a:9d:fb:66:
                    0f:04:21:d7:23:22:2f:93:0b:7c:58:20:3d:83:f9:
                    5e:3e:b9:e4:8a:a6:61:92:f4:10:c9:da:27:13:12:
                    78:c4:df:33:af:b3:6d:00:36:d4:37:dc:97:52:b8:
                    47:16:2c:7c:31:35:f3:be:9c:f3:23:d7:8f:84:aa:
                    cb:72:36:0b:a5:38:e1:ee:22:bf:7c:74:97:a0:25:
                    2a:99:7b:fe:99:2b:85:6e:50:a3:fd:49:59:55:4f:
                    44:b8:42:f5:51:87:db:45:31:8d:06:2d:63:28:5f:
                    9e:d0:76:01:6e:46:22:d7:30:d8:c8:59:00:73:d9:
                    92:6f:29:be:12:be:f3:e7:d1:d1:a6:89:2b:f2:ae:
                    76:f7:09:d2:2b:d2:fc:43:d1:73:1a:02:56:42:42:
                    9f:65:41:4a:12:07:6b:60:12:88:f3:b8:c3:04:58:
                    c0:32:46:ac:c8:4b:dc:73:84:28:47:4c:38:76:31:
                    13:49:bb:bc:19:86:3b:76:22:96:ce:1e:09:56:49:
                    ba:0c:4f:63:29:63:d2:b5:9f:a9:de:91:86:20:29:
                    80:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D1:EA:B6:95:13:6C:B8:EA:74:F0:12:E3:0C:66:91:9A:A7:AB:2E
            X509v3 Authority Key Identifier:
                keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7a:2d:9e:00:a5:a4:b7:60:04:9a:18:03:09:d8:f9:cd:fa:
         1d:4e:b9:70:ba:24:46:6d:01:70:1a:73:39:e5:cc:93:cc:70:
         e4:74:18:77:45:a4:fb:7f:94:dc:f6:25:28:91:28:90:fb:6a:
         4e:6f:09:ae:98:b5:7d:8d:8b:85:89:3f:b0:23:f4:6a:c6:ab:
         99:8c:21:2a:9a:6b:dc:c6:de:87:c0:c3:a4:84:ad:cc:2f:2e:
         84:27:7f:71:79:98:7c:43:92:29:00:cf:d0:8a:fd:24:7c:ce:
         1c:2e:f0:4e:e6:7c:e7:8b:64:95:bc:79:4e:13:f1:b9:c7:fe:
         08:4e:1b:4d:3b:2b:e9:ad:59:64:29:57:a5:f7:96:cb:ef:fe:
         f6:85:bf:f3:43:a3:ab:84:5a:67:0a:fe:c1:e5:5e:58:40:2c:
         25:0a:7e:9f:e6:54:a9:f2:ab:08:b3:2b:39:a8:fb:ac:12:0b:
         ee:97:d6:19:8a:7c:67:28:d2:4c:cc:eb:23:a1:bc:06:85:41:
         8c:5d:4f:f7:7c:1c:b5:3d:12:94:ae:c4:24:96:89:59:e2:34:
         07:fb:c0:c8:11:47:a6:bd:51:0e:c7:b0:17:7f:b9:6a:9c:e1:
         32:6b:b1:27:89:a0:a9:1a:a6:6d:20:6e:72:f9:ef:f7:db:43:
         31:3c:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:38:26 2025 by rpki-client